bbb0ec6641a3ef2e9f4fc86886002a8c708a9c1263b77ea1caa1e606f43d95fa | Triage

Sharing

General

Target

bbb0ec6641a3ef2e9f4fc86886002a8c708a9c1263b77ea1caa1e606f43d95fa
Size

702KB
MD5

02e232e98d4ea463fff5059a5036ef86
SHA1

67af90f62cf85148b73b7643b461356acbea7cb2
SHA256

bbb0ec6641a3ef2e9f4fc86886002a8c708a9c1263b77ea1caa1e606f43d95fa
SHA512

01bcd39bc9029319cf40bcaf2dbf4db16fc5f8a2da538e5481bdd0cbe67c62dcd2377926130e4c13b28c809b271101ef2a4346f3cbf4f66a38462c265495c58e
SSDEEP

12288:y3TdtLW5WIj1YSSdFxBvBSXyMzBUWb9lx/9AgHLo8OW+rB:MDsj1dEBBcJ9nPx/igrp+

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

bbb0ec6641a3ef2e9f4fc86886002a8c708a9c1263b77ea1caa1e606f43d95fa
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.penask
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE